Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d16c47f-9d97-3dc8-99a8-73e9dad79d05.roa
File:                     3d16c47f-9d97-3dc8-99a8-73e9dad79d05.roa (raw, json)
Hash identifier:          Nn69DJRlPmWtlwkReUualTpwrr+JAVTIs9+e59H5wg0=
Subject key identifier:   02:6A:1B:41:BB:0D:1A:33:19:4B:30:B6:9A:C7:F3:53:AC:6C:67:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA5AA67B9508C7C6353B462E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d16c47f-9d97-3dc8-99a8-73e9dad79d05.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d80:1280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:67:b9:50:8c:7c:63:53:b4:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=24734727-0ca6-43a3-b583-de9992cc84a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:18:f0:1b:da:66:fa:37:24:25:e2:42:87:
                    2f:37:8a:05:7f:8f:93:04:39:e7:93:81:00:81:78:
                    46:4f:21:de:91:30:c8:55:3a:7e:8c:0a:86:51:72:
                    7a:7f:92:1c:57:f6:ab:c8:52:c6:b7:f2:23:b8:43:
                    48:e2:35:b8:f1:da:03:0e:7a:6f:cd:38:bd:ab:17:
                    b0:19:d0:ac:7d:e8:65:78:70:2a:72:8a:27:54:a3:
                    00:33:df:44:76:4b:08:a1:eb:4e:d6:e7:4f:40:82:
                    06:d5:3d:03:3f:4a:85:05:be:c7:54:5c:e0:2c:de:
                    cb:f0:9f:b0:80:43:05:4f:c2:4d:f0:eb:ff:2e:1f:
                    cf:34:b5:8b:17:90:40:f2:e1:c6:07:12:b2:90:3e:
                    e9:56:f1:d9:35:3f:1d:ca:fe:53:a6:38:d7:57:65:
                    1f:20:2c:52:86:f0:21:1d:da:32:72:1c:51:c9:de:
                    e1:e1:81:0d:9c:f7:a9:e3:3a:1c:7b:60:dd:14:26:
                    72:5d:c9:15:c0:61:30:46:4e:81:3e:15:cb:e1:bb:
                    55:31:f0:79:8f:d9:3f:e2:62:b4:54:b9:c7:a6:04:
                    70:02:09:0b:36:b0:43:0d:68:ca:61:b8:19:44:97:
                    e5:0d:66:0b:13:d1:f2:61:f9:5a:c1:51:3d:88:98:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:1B:41:BB:0D:1A:33:19:4B:30:B6:9A:C7:F3:53:AC:6C:67:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d16c47f-9d97-3dc8-99a8-73e9dad79d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:8c:77:ea:f8:e1:d1:ef:57:bf:37:52:45:a5:08:7b:f0:
         d1:ea:55:60:a4:2f:cf:01:32:46:25:ae:18:af:2d:48:2b:5e:
         7c:5e:cb:3b:ce:6e:99:f3:7e:47:84:1a:ff:ba:4f:73:5c:67:
         7c:75:5c:88:b0:11:4a:d8:fc:fa:dd:16:8a:c1:8e:87:bf:bb:
         db:bd:30:bd:06:63:6f:5f:f4:e8:0b:d9:01:f3:f3:19:ea:a1:
         10:46:1a:c9:8e:42:b2:fd:16:87:72:74:b3:f5:7a:a4:9d:ce:
         eb:52:56:a6:4f:39:85:dd:0f:b0:f9:35:f5:f4:32:50:9d:39:
         08:5f:7f:0c:c6:68:0d:22:d9:55:86:56:38:80:61:cb:86:73:
         9d:ac:39:2b:f7:95:12:2a:75:58:a1:fe:1a:72:03:b4:58:e1:
         6e:50:b0:20:df:8e:7c:9c:ff:85:1a:66:1c:53:c6:09:cc:f0:
         fd:8f:46:79:a5:63:db:68:80:5f:c6:b6:6f:25:a9:2e:f3:1d:
         be:bf:4b:2c:77:a0:f7:40:d3:96:3f:e3:a2:f4:b1:70:4a:cd:
         fd:f0:76:bb:eb:04:a3:b6:ae:68:d7:25:f6:b9:9e:f9:20:4e:
         8f:89:70:38:41:f1:ec:67:19:50:aa:c1:46:d8:ff:fb:26:3e:
         35:f4:20:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6lqme5UIx8Y1O0YuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
MjQ3MzQ3MjctMGNhNi00M2EzLWI1ODMtZGU5OTkyY2M4NGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/cY8BvaZvo3JCXiQocvN4oFf4+TBDnnk4EA
gXhGTyHekTDIVTp+jAqGUXJ6f5IcV/aryFLGt/IjuENI4jW48doDDnpvzTi9qxew
GdCsfehleHAqcoonVKMAM99EdksIoetO1udPQIIG1T0DP0qFBb7HVFzgLN7L8J+w
gEMFT8JN8Ov/Lh/PNLWLF5BA8uHGBxKykD7pVvHZNT8dyv5TpjjXV2UfICxShvAh
HdoychxRyd7h4YENnPep4zoce2DdFCZyXckVwGEwRk6BPhXL4btVMfB5j9k/4mK0
VLnHpgRwAgkLNrBDDWjKYbgZRJflDWYLE9HyYflawVE9iJj7TwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAJqG0G7DRozGUswtprH81OsbGfSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2QxNmM0N2YtOWQ5Ny0z
ZGM4LTk5YTgtNzNlOWRhZDc5ZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFELjHfq+OHR71e/N1JFpQh78NHqVWCkL88BMkYlrhivLUgrXnxe
yzvObpnzfkeEGv+6T3NcZ3x1XIiwEUrY/PrdForBjoe/u9u9ML0GY29f9OgL2QHz
8xnqoRBGGsmOQrL9FodydLP1eqSdzutSVqZPOYXdD7D5NfX0MlCdOQhffwzGaA0i
2VWGVjiAYcuGc52sOSv3lRIqdVih/hpyA7RY4W5QsCDfjnyc/4UaZhxTxgnM8P2P
RnmlY9togF/Gtm8lqS7zHb6/Syx3oPdA05Y/46L0sXBKzf3wdrvrBKO2rmjXJfa5
nvkgTo+JcDhB8exnGVCqwUbY//smPjX0IJ8=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:17 2026 by rpki-client